Overview

overview

10

Static

static

3

3b9617f561...b1.exe

windows7-x64

10

3b9617f561...b1.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3b9617f561c549d43ee612b00c635ab1

  • Size

    229KB

  • Sample

    231225-zcd4paaaen

  • MD5

    3b9617f561c549d43ee612b00c635ab1

  • SHA1

    1b2cc5c3a3694e1600a0c358df605d0c24047b3e

  • SHA256

    bddf24d7ae594e5398077966c512aa4b68722063cc0735d0d3a4900eabe010ab

  • SHA512

    4e819a3b66ea94b2ba3464a2f32d9394c45f35c416bce8e6f60d290d4b35c85489a8782d06409635648c8d650fcb16139f93c8918431ac457122f284c1ac8bd3

  • SSDEEP

    6144:FcNkgTq4uXFFcz1c6afbkXV1tnN8MZZ2LuryV:FcNkgTq42cBPafbGV1xKV

Score
10/10
collectiondiscoverypersistence

Malware Config

Targets

    • Target

      3b9617f561c549d43ee612b00c635ab1

    • Size

      229KB

    • MD5

      3b9617f561c549d43ee612b00c635ab1

    • SHA1

      1b2cc5c3a3694e1600a0c358df605d0c24047b3e

    • SHA256

      bddf24d7ae594e5398077966c512aa4b68722063cc0735d0d3a4900eabe010ab

    • SHA512

      4e819a3b66ea94b2ba3464a2f32d9394c45f35c416bce8e6f60d290d4b35c85489a8782d06409635648c8d650fcb16139f93c8918431ac457122f284c1ac8bd3

    • SSDEEP

      6144:FcNkgTq4uXFFcz1c6afbkXV1tnN8MZZ2LuryV:FcNkgTq42cBPafbGV1xKV

    Score
    10/10
    collectiondiscoverypersistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Accesses Microsoft Outlook profiles

      collection

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks